Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa
File: RQ92u74VFcMomA_hodnH25PoE-E.roa (raw, json)
Hash identifier: RHDHAMaLnHm5roG674ZjFccPouAMIAneycPxryAWfIA=
Subject key identifier: 45:0F:76:BB:BE:15:15:C3:28:98:0F:E1:A1:D9:C7:DB:93:E8:13:E1
Certificate issuer: /CN=72047be15b275902dcf617dc3d0e16dc1f308022
Certificate serial: 01889B205524CEAA56AA2467AD68404DD4F9
Authority key identifier: 72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa
Signing time: Thu 08 Jun 2023 13:09:27 +0000
ROA not before: Thu 08 Jun 2023 13:09:27 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 2121
IP address blocks: 193.0.24.0/21 maxlen: 21
2001:67c:64:ffff:0:186:d20f:1e28/128 maxlen: 128
2001:67c:64:ffff:0:186:a1c7:a442/128 maxlen: 128
2001:67c:64:ffff:0:186:92f9:8437/128 maxlen: 128
2001:67c:64:ffff:0:186:59e5:727c/128 maxlen: 128
2001:67c:64:ffff:0:188:5fe2:b396/128 maxlen: 128
2001:67c:64:ffff:0:186:6f5a:adbb/128 maxlen: 128
2001:67c:64:ffff:0:186:7ecd:cc90/128 maxlen: 128
2001:67c:64:ffff:0:187:4695:a68a/128 maxlen: 128
2001:67c:64:ffff:0:186:6e7e:de02/128 maxlen: 128
2001:67c:64:ffff:0:186:9e58:8c82/128 maxlen: 128
2001:67c:64:ffff:0:188:7858:a003/128 maxlen: 128
2001:67c:64:ffff:0:186:cfe9:cd16/128 maxlen: 128
2001:67c:64:ffff:0:187:fa9a:b088/128 maxlen: 128
2001:67c:64::/48 maxlen: 48
2001:67c:64:ffff:0:186:c678:c9dc/128 maxlen: 128
2001:67c:64:ffff:0:187:b2b8:a7dd/128 maxlen: 128
2001:67c:64:ffff:0:186:620c:ed81/128 maxlen: 128
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:9b:20:55:24:ce:aa:56:aa:24:67:ad:68:40:4d:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72047be15b275902dcf617dc3d0e16dc1f308022
Validity
Not Before: Jun 8 13:09:27 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=450f76bbbe1515c328980fe1a1d9c7db93e813e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e5:a2:4e:2c:af:2c:e7:05:53:ba:18:2f:54:
79:51:a8:8e:83:88:1f:e4:90:aa:42:03:f1:44:ac:
77:75:11:d3:c0:f6:1c:e3:45:2b:20:00:95:01:42:
b4:99:03:c9:41:6c:e2:22:62:12:8b:d9:a2:73:40:
35:5b:ea:be:1d:8e:6c:a6:34:ff:23:4a:0d:52:31:
18:50:30:2e:10:7f:b0:4d:0b:f8:5e:43:2e:28:c0:
fa:27:76:0f:02:4c:45:81:5c:92:3a:5c:4c:4f:a1:
8d:51:d9:e7:03:e1:82:35:87:30:0d:2f:7d:c7:29:
0c:5c:4a:86:78:82:3e:b5:a1:f3:5f:c2:ec:4c:23:
cb:29:d1:6c:99:cf:a1:5a:92:fd:38:e6:64:dd:05:
05:d5:ae:c0:57:d0:15:7e:f7:18:57:98:77:8f:b9:
b4:7c:cb:51:59:46:d6:08:44:0f:75:8b:86:d4:b4:
7c:ff:5b:bb:1d:db:55:67:df:60:61:b5:38:c5:58:
34:1c:e3:19:4a:7d:6d:d2:e7:82:a8:38:b3:97:89:
fc:bc:6d:b7:5e:5e:85:14:c6:5e:c3:55:7d:92:67:
6b:05:ba:24:33:20:d1:40:12:17:a0:b9:2d:06:92:
6b:16:37:7f:92:e6:a7:2a:f4:ef:43:1b:2f:e7:24:
cd:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:0F:76:BB:BE:15:15:C3:28:98:0F:E1:A1:D9:C7:DB:93:E8:13:E1
X509v3 Authority Key Identifier:
keyid:72:04:7B:E1:5B:27:59:02:DC:F6:17:DC:3D:0E:16:DC:1F:30:80:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cgR74VsnWQLc9hfcPQ4W3B8wgCI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/RQ92u74VFcMomA_hodnH25PoE-E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/798447-21f4-45ab-99dc-1abe3ac10aa6/1/cgR74VsnWQLc9hfcPQ4W3B8wgCI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.0.24.0/21
IPv6:
2001:67c:64::/48
Signature Algorithm: sha256WithRSAEncryption
55:86:13:91:93:10:88:20:ec:7f:49:3c:67:3c:62:aa:84:d9:
4e:6b:c6:fb:f3:88:b5:87:55:56:4b:d8:1f:b4:13:10:24:af:
ce:cb:77:a6:f4:42:94:26:9a:90:43:06:87:d7:6c:38:3e:ac:
2b:5f:9d:2e:54:7a:00:b4:c7:de:93:8d:7f:d9:62:56:a5:c6:
33:86:b9:cc:f9:e6:fe:23:57:f1:ec:c8:a0:cc:0a:94:12:b0:
0f:ab:a3:62:7c:8c:97:96:57:77:9c:9b:5c:b5:68:eb:1d:8e:
5f:dc:ad:23:1b:e6:59:0e:22:4f:3d:42:4b:48:f8:1a:2f:19:
e6:94:6c:d5:3c:21:e3:b9:1b:75:ea:b0:d9:88:7d:f3:b5:69:
81:1a:a7:04:35:82:15:78:5b:8c:fd:29:85:bf:99:e6:75:18:
a4:9e:aa:b9:00:5c:9c:a9:87:bc:74:20:ae:c5:ad:46:42:b5:
9f:e4:83:ec:82:cf:ed:84:8c:58:bf:11:e1:5b:f2:49:41:ba:
1c:37:e5:f7:d7:21:f4:77:4f:7d:4a:64:0d:39:a8:b7:39:60:
c2:65:b1:b0:1e:66:53:f1:1d:62:cd:be:a4:c3:6a:da:86:26:
d2:9d:88:4f:5f:ea:bc:1b:fe:24:c8:a3:a6:4c:5c:ec:98:5c:
da:20:88:29
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAYibIFUkzqpWqiRnrWhATdT5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMDQ3YmUxNWIyNzU5MDJkY2Y2MTdkYzNkMGUxNmRjMWYz
MDgwMjIwHhcNMjMwNjA4MTMwOTI3WhcNMjQwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NTBmNzZiYmJlMTUxNWMzMjg5ODBmZTFhMWQ5YzdkYjkzZTgxM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOWiTiyvLOcFU7oYL1R5UaiOg4gf
5JCqQgPxRKx3dRHTwPYc40UrIACVAUK0mQPJQWziImISi9mic0A1W+q+HY5spjT/
I0oNUjEYUDAuEH+wTQv4XkMuKMD6J3YPAkxFgVySOlxMT6GNUdnnA+GCNYcwDS99
xykMXEqGeII+taHzX8LsTCPLKdFsmc+hWpL9OOZk3QUF1a7AV9AVfvcYV5h3j7m0
fMtRWUbWCEQPdYuG1LR8/1u7HdtVZ99gYbU4xVg0HOMZSn1t0ueCqDizl4n8vG23
Xl6FFMZew1V9kmdrBbokMyDRQBIXoLktBpJrFjd/kuanKvTvQxsv5yTNVQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFEUPdru+FRXDKJgP4aHZx9uT6BPhMB8GA1UdIwQY
MBaAFHIEe+FbJ1kC3PYX3D0OFtwfMIAiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMt
MWFiZTNhYzEwYWE2LzEvUlE5MnU3NFZGY01vbUFfaG9kbkgyNVBvRS1FLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS83OTg0NDctMjFmNC00NWFiLTk5ZGMtMWFiZTNhYzEwYWE2
LzEvY2dSNzRWc25XUUxjOWhmY1BRNFczQjh3Z0NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBAFWGE5GTEIgg7H9JPGc8
YqqE2U5rxvvziLWHVVZL2B+0ExAkr87Ld6b0QpQmmpBDBofXbDg+rCtfnS5UegC0
x96TjX/ZYlalxjOGucz55v4jV/HsyKDMCpQSsA+ro2J8jJeWV3ecm1y1aOsdjl/c
rSMb5lkOIk89QktI+BovGeaUbNU8IeO5G3XqsNmIffO1aYEapwQ1ghV4W4z9KYW/
meZ1GKSeqrkAXJyph7x0IK7FrUZCtZ/kg+yCz+2EjFi/EeFb8klBuhw35ffXIfR3
T31KZA05qLc5YMJlsbAeZlPxHWLNvqTDatqGJtKdiE9f6rwb/iTIo6ZMXOyYXNog
iCk=
-----END CERTIFICATE-----
Generated at Thu Jun 12 06:28:20 2025 by rpki-client